[Mono-list] Bug in signcode? (Corrupts PE checksum)

JoelKatz davids at webmaster.com
Sat Nov 14 13:02:06 EST 2009

Sebastien Pouliot-2 wrote:
> The field was left empty because it was not required for verifying the
> authenticode integrity. In fact it's not commonly checked afaik. Is this
> causing you a problem somewhere ?
> In this case patches would be welcome :-) Otherwise please open a bug
> report (as an enhancement) on bugzilla.novell.com so I don't forget
> about this issue next time I go around fixing those parts.

In our case, it was a check done to make sure the executable hadn't been
damaged or corrupted in transport. That code was not sophisticated enough to
understand a signature.

I'm not sure this can fairly be categorized as an enhancement request. The
Mono tool leaves the checksum invalid and the corresponding Microsoft tools
correct the checksum (or zero it, I actually didn't specifically check

Zero is a perfectly valid PE checksum value, and it indicates that no
checksum is present. Having the Mono tool zero the checksum would solve my


View this message in context: http://old.nabble.com/Bug-in-signcode--%28Corrupts-PE-checksum%29-tp26325662p26351942.html
Sent from the Mono - General mailing list archive at Nabble.com.

More information about the Mono-list mailing list